Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
File: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft (raw, json)
Hash identifier: EQHt2dV+80gZodWtmX4EuS7RqvRZzgIFRZV7h8nDD/M=
Subject key identifier: 95:95:BD:F5:C9:B6:C1:C4:87:9C:E2:3A:96:CF:80:B4:AF:0B:4B:E2
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial: 019685803382B6E418F3E8EBDF2F5C1EBF2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
Manifest number: 151C
Signing time: Wed 30 Apr 2025 07:01:33 +0000
Manifest this update: Wed 30 Apr 2025 07:01:33 +0000
Manifest next update: Thu 01 May 2025 07:01:33 +0000
Files and hashes: 1: IsTCtVmTNyn-RD8cnFqGYXSoe0E.roa (hash: L2WChiXDdgP/OiZ7K6XF82266pxnvmteFE2BApkpXrw=)
2: nLB2qYSBJ1YFwwH2Uq3CWH-Xycw.roa (hash: DDaDM0x5+8q+LGF59JGSBz5quMqPXuHhZb7HpNUm6U8=)
3: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl (hash: 49qLxX7/vuMudusjuE9ifERYzZZ6ieXysbeZNS/2Uws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:80:33:82:b6:e4:18:f3:e8:eb:df:2f:5c:1e:bf:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Validity
Not Before: Apr 30 07:01:33 2025 GMT
Not After : May 1 07:01:33 2025 GMT
Subject: CN=9595bdf5c9b6c1c4879ce23a96cf80b4af0b4be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:bb:00:9a:29:9c:f4:34:ac:52:26:07:2d:
eb:ef:05:7b:b1:ba:9e:8c:53:1d:fd:08:3f:c0:63:
d2:04:49:0d:50:a3:57:95:e0:d5:64:fa:ae:fb:21:
2c:d8:8d:a3:3e:fa:bd:0d:78:c4:35:a1:e9:73:d9:
10:0a:33:39:95:25:63:d9:b5:c5:d9:f9:91:c3:d3:
fc:34:38:9f:bf:57:9e:5a:3a:ed:8a:b2:8f:72:68:
e4:04:f8:8f:7c:9f:c1:fb:35:b2:c7:9e:29:56:98:
0a:29:82:b3:42:75:9c:19:77:7f:5c:d5:f6:89:79:
1e:15:2a:2e:57:d6:66:bc:c1:d5:25:ad:c6:c9:fb:
32:5a:ba:d0:92:b2:5a:80:9d:8c:55:00:8f:82:d3:
eb:ea:72:04:e0:8e:02:d1:0b:c2:3f:50:30:00:94:
37:c7:38:eb:5e:c7:8f:f1:4e:e9:57:37:d1:3f:fd:
b3:16:af:52:d6:b0:69:c7:ea:53:60:5c:4c:3e:c4:
13:a0:02:c7:98:ff:c5:5a:f1:59:3d:52:77:e6:7e:
e6:a2:64:b8:cc:60:9f:f4:c3:a2:77:8a:2d:f3:fe:
c8:82:d8:a6:97:d1:cd:18:66:79:15:87:95:de:f8:
82:56:ad:be:b0:89:9a:c0:dd:95:06:b6:2b:5f:18:
cc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:95:BD:F5:C9:B6:C1:C4:87:9C:E2:3A:96:CF:80:B4:AF:0B:4B:E2
X509v3 Authority Key Identifier:
keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:21:44:e0:e0:d9:23:c2:72:41:2b:7d:c7:e2:3b:17:8b:44:
d1:fe:9b:31:d4:3b:f2:6f:c3:86:fa:88:5e:a5:59:e7:3d:40:
7a:e6:47:93:7b:26:0d:b0:3e:8d:f1:12:bf:f2:77:e7:21:e0:
74:29:74:2d:3c:ab:32:22:75:d0:8d:a2:2a:f1:f2:fd:5b:ec:
71:5e:31:98:16:58:e7:62:60:82:e1:4c:be:88:7a:5e:2d:96:
c0:fb:82:27:05:13:9c:22:66:45:41:ae:27:52:7e:51:52:c0:
47:53:3a:7c:fb:07:70:46:12:33:0e:e8:09:b5:c8:2d:4a:f1:
7f:09:90:e9:cf:88:83:f4:8d:29:04:9d:c6:e1:58:bb:d3:13:
92:48:56:71:14:07:9f:ac:4f:91:0a:6e:1f:fe:30:d3:ec:9c:
91:df:26:46:04:ac:5b:5f:da:74:f7:f0:53:04:3d:64:36:89:
9e:46:ad:d0:08:00:c4:89:a6:ed:e8:80:0d:c4:ab:e1:89:5b:
7b:b1:0d:88:9b:98:4f:3e:09:cf:f9:e3:1c:0c:0f:3c:b4:bd:
3a:b7:88:68:7f:73:69:7b:b2:39:d4:01:1a:db:c9:26:73:b1:
24:31:f3:4a:ed:44:ca:77:5e:e9:f0:3c:39:ca:f0:1e:87:69:
1e:3c:46:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFgDOCtuQY8+jr3y9cHr8qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MWQ0ZTk3ODgxMGU5Nzg5YTc2ZTY4N2E3ZGRkOTc1MjZi
MGQ5YmMwHhcNMjUwNDMwMDcwMTMzWhcNMjUwNTAxMDcwMTMzWjAzMTEwLwYDVQQD
Eyg5NTk1YmRmNWM5YjZjMWM0ODc5Y2UyM2E5NmNmODBiNGFmMGI0YmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOu7AJopnPQ0rFImBy3r7wV7sbqe
jFMd/Qg/wGPSBEkNUKNXleDVZPqu+yEs2I2jPvq9DXjENaHpc9kQCjM5lSVj2bXF
2fmRw9P8NDifv1eeWjrtirKPcmjkBPiPfJ/B+zWyx54pVpgKKYKzQnWcGXd/XNX2
iXkeFSouV9ZmvMHVJa3GyfsyWrrQkrJagJ2MVQCPgtPr6nIE4I4C0QvCP1AwAJQ3
xzjrXseP8U7pVzfRP/2zFq9S1rBpx+pTYFxMPsQToALHmP/FWvFZPVJ35n7momS4
zGCf9MOid4ot8/7Igtiml9HNGGZ5FYeV3viCVq2+sImawN2VBrYrXxjM2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWVvfXJtsHEh5ziOpbPgLSvC0viMB8GA1UdIwQY
MBaAFKQdTpeIEOl4mnbmh6fd2XUmsNm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xNTg0NTAtZGQ0My00YjgyLWFiMmIt
MDk1ZTcxODhkMGEwLzEvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8xNTg0NTAtZGQ0My00YjgyLWFiMmItMDk1ZTcxODhkMGEw
LzEvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiFE4ODZ
I8JyQSt9x+I7F4tE0f6bMdQ78m/DhvqIXqVZ5z1AeuZHk3smDbA+jfESv/J35yHg
dCl0LTyrMiJ10I2iKvHy/VvscV4xmBZY52JgguFMvoh6Xi2WwPuCJwUTnCJmRUGu
J1J+UVLAR1M6fPsHcEYSMw7oCbXILUrxfwmQ6c+Ig/SNKQSdxuFYu9MTkkhWcRQH
n6xPkQpuH/4w0+yckd8mRgSsW1/adPfwUwQ9ZDaJnkat0AgAxImm7eiADcSr4Ylb
e7ENiJuYTz4Jz/njHAwPPLS9OreIaH9zaXuyOdQBGtvJJnOxJDHzSu1Eynde6fA8
OcrwHodpHjxGrw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 09:41:24 2025 by rpki-client